That’s it !
I have to many services that open logs files… my monitoring system (grok and promtail).
It was not related to crowdsec.
There is what i do to resolve the issue:
I had to increase the inotify max_user_instances.
$ cat /proc/sys/fs/inotify/max_user_instances
128
$ sudo sysctl fs.inotify.max_user_instances=8192
fs.inotify.max_user_instances = 8192
$ cat /proc/sys/fs/inotify/max_user_instances
8192
If you want to do it permanently:
$ echo fs.inotify.max_user_instances=8192 >> /etc/sysctl.conf
$ sysctl --load
i don’t know exactly what number i have to use but it seems to work.
Bye